Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

help computer is runing slow TROJ DLOADER.AKZ can't remove

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Unread postby AndyAtHull » January 18th, 2006, 4:50 pm

Seeing as Ad-Aware is giving us issues. We will try SpySweeper.

Please download WebRoot SpySweeper from HERE (It's a 90 day trial):
  • Click the Free Trial link under to "SpySweeper" to download the program.
  • Install it.
  • Once the program is installed, it will open.
  • It will prompt you to update to the latest definitions, click Yes.
  • Once the definitions are installed,
  • Reboot into safe mode, Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.
  • Open spysweeper and click Sweep Now on the left side.
  • Click the Start button.
  • When it's done scanning, click the Next button.
  • Make sure everything has a check next to it, then click the Next button.
  • It will remove all of the items found.
  • Click Session Log in the upper right corner, copy everything in that window.
  • Click the Summary tab and click Finish.
  • Paste the contents of the session log you copied into your next reply.

No fresh HijackThis log is needed. Just the spysweeper contents.

Andy :)
User avatar
AndyAtHull
Visiting Staff
 
Posts: 1636
Joined: October 6th, 2005, 2:03 pm
Location: UK
Advertisement
Register to Remove

Unread postby lecia1 » January 20th, 2006, 9:33 pm

I downloaded SpSweeper - the web pae you gave me was not available and I had to go to another and downloaded the software. I stated in safe mode - thnen opened spysweeper and did sweepnow - and it ran - when it was done scannong there were 6 items to remove - they were all selected but I could not go to NEXT - it was not an option - the only options were subscribe now - or subscribe later - I tred later and it sent me back to the beginning and I started over - the next time I copied the session log before I selected and I tried subscribe now and it would not do it since I was in safe mode and cannot get conntected to the internet - I went and restated my computer - went on ine and tried to subscribe - and they want me to purchase the software - so I excited out and am sending you this message.

here is the sessionlog:
********
7:47 PM: | Start of Session, Friday, January 20, 2006 |
7:47 PM: Spy Sweeper started
7:47 PM: Sweep initiated using definitions version 604
7:47 PM: Starting Memory Sweep
7:48 PM: Memory Sweep Complete, Elapsed Time: 00:01:05
7:48 PM: Starting Registry Sweep
7:49 PM: Found Adware: morpheus adware
7:49 PM: HKCR\windowsie\ (1 subtraces) (ID = 135220)
7:49 PM: HKLM\software\classes\windowsie\ (1 subtraces) (ID = 135221)
7:50 PM: Found Adware: appliedsearch
7:50 PM: HKCR\interface\{6600d22d-083f-11d6-99de-d172e92ebc2a}\ (8 subtraces) (ID = 661011)
7:50 PM: HKCR\interface\{6600d22e-083f-11d6-99de-d172e92ebc2a}\ (8 subtraces) (ID = 661020)
7:50 PM: HKLM\software\classes\interface\{6600d22d-083f-11d6-99de-d172e92ebc2a}\ (8 subtraces) (ID = 661094)
7:50 PM: HKLM\software\classes\interface\{6600d22e-083f-11d6-99de-d172e92ebc2a}\ (8 subtraces) (ID = 661103)
7:50 PM: Found Adware: redzip toolbar
7:50 PM: HKU\.DEFAULT\software\microsoft\windows\currentversion\explorer\ || insid (ID = 139328)
7:50 PM: Registry Sweep Complete, Elapsed Time:00:02:10
7:50 PM: Starting Cookie Sweep
7:50 PM: Found Spy Cookie: questionmarket cookie
7:50 PM: default@questionmarket[1].txt (ID = 3217)
7:50 PM: Found Spy Cookie: overture cookie
7:50 PM: default@overture[2].txt (ID = 3105)
7:50 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
7:50 PM: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because it is being used by another process
7:50 PM: Starting File Sweep
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs68439b0a-3e93-4d21-b10e-ab1ba1fc2e0c.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e25be28-3444-4d21-accf-2580d103f5a0.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9321ba80-8781-4720-a44c-e354453d7bc5.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6cd8a8a3-b9e2-4e62-ac2b-16c9c38b77b3.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse9ad4690-326e-4511-88da-9d8e534c5e6f.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs749ac7c7-9deb-4682-9a03-be89a4deb317.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc6560e2c-f27f-4a67-8c02-59be1b624d0f.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa0a4ef39-1fb6-4bf1-a911-5d7f937de04b.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs65cfbf2e-1407-4edf-bb08-7988530bdda4.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs34f80521-0696-4f7e-a395-61b578c97f9a.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4f8bca75-3ad6-4314-839d-575ce2b70a86.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdb7b96d4-4ec5-4af3-a5e2-2645ed747453.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3c9b4839-a2dd-4540-89a7-cc94efcb9bcb.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs573399d3-b6f0-49c0-b3d9-0c4edd65c2f6.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5bd665b7-3fb7-4277-87cc-04f4f994b070.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs00298164-c375-4b54-b214-cc2f86fb0ad9.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs63b7f8dd-2a6b-47c5-9b67-ab5e0e941484.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4581ab02-4331-4756-bb8d-bd963e11afde.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs312389aa-f73e-40e4-8920-d91661a1433f.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd50f34fb-fa03-4ea0-8d04-26aa067b62c5.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9c9ceae1-fc63-4112-b6a3-a89ca44898ac.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs134a104d-349a-4a6a-9fce-cc9ceaa2e076.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse65a26f7-3e81-415d-8da8-66a01780cfd3.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscd979fa7-7c0b-4768-a161-b1a5b01e23d4.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscdec2d13-b988-41fe-a18f-9812cca64c88.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf204040d-ea62-45bb-a3eb-99540997c590.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5673af19-0886-4913-bf2e-dd035b347798.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1a3b7190-0855-45db-9732-d4e740fcb2ba.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse3372239-f345-4940-9761-7e9814ea5ad5.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc0874faf-503c-405b-95cf-0fe0396bc89d.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsecfc909e-6840-473e-94ff-73fe2c4e72e2.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs543afe6d-d453-440a-93d2-dd8e2534a576.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6fdf91b0-0fef-4d85-90d8-e45877a6b424.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4bcced7a-c91f-492b-8297-a7193b274743.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscdf9787a-d63d-43d0-9636-0ae2f3197beb.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9a03cdca-e149-498e-85f7-12bb22790bfc.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6bfcf5f2-7e1f-436c-ad98-60ac16a337d6.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs877fb376-a30a-4ef7-a8cb-c1b11dacac34.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs11385761-96cf-49d8-8795-630049197b3b.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6f0c4440-184a-4728-bea5-be13b6b8aea4.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfc745aa1-b9aa-4ecb-9659-72382e450b59.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs34056d50-4b21-4cdb-a236-be69eef5e691.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa9b9d3d5-5160-45b8-8169-acf2fa349684.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6b0e40ae-033e-4177-be2a-9747b3beb986.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1de0db24-fa73-4732-af87-aac6f9dc19db.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfbcd48ea-7ea3-434b-b5d7-16fc281fadf6.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs48aab939-6cfe-4c49-938d-85a604e6b80e.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs204d04e4-403d-424d-9211-2693525ac200.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9afcadc3-e502-4d4a-8dae-32e3f21812e8.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5824a90b-b2d5-4b1b-b5e2-664993507f4d.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs77b921c5-71fb-40f6-a28e-b6d1f7f994f3.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa43b2ad7-a42b-40e9-8574-213835294d43.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs52389a79-5586-47d3-96aa-db517a40db51.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs783605b2-d9b6-417f-a2b8-49354d41d87d.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs81fb387f-986a-4f07-81b9-4adde492833e.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs206cd93c-0a24-4822-863c-4078a4c7a945.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf1ea8b82-64dd-41af-bf53-8faa27bb3278.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs785e4347-df8e-404e-a2ee-faf79f91cf78.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs24d3482b-d199-47be-a17b-2cb3b0110f79.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbf3b8e1e-c395-4a37-8111-7f08e9447ffc.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs81ac0f00-44fe-4adc-863a-a629133066ec.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs77375907-b974-4d96-b383-cf716d5ddc8e.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb7cb9fc7-5984-4c0f-80e3-f7c342027205.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs97116cb7-1ce9-4fb8-ada8-f11c6a0c0aa8.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7f771885-f848-4e6f-9d2f-eb1d82f303c5.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7958fceb-eec4-44a1-8d24-21634aaad18a.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd3e9b524-4654-47b4-9aea-ae4a3efa944e.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs773767ce-68d0-4ec4-ac15-86f079923a45.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs947ece35-5b7b-454d-a3f0-e7b1bef30491.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs86585a77-9214-4155-babb-9cbdb2437866.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4fee3b16-6378-4b9e-ba6f-74570d5abc1c.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4cdbf7bb-1c08-499f-ac68-233286a11b7b.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1ec5a7f9-2a86-456c-8b83-2bd3a6178414.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa00f78a8-e7bd-4d9a-b541-513ce84c629d.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd90cf948-86a7-41c1-aec5-e5af327cd495.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs84b8c59a-fb29-440b-9869-fae882d9376b.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0d4d3f0f-2f44-4a14-8bb6-750bb9bffb5a.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs209ff4ce-f1fc-4282-8580-b52e5a30f1a8.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse40b779e-fc88-4cd7-9a09-f89fef623b5d.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc169c764-977a-44c2-8260-bcdfdb808d81.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsaa87f3da-f86a-4e37-8d6b-68812ed0f877.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6339362a-82f4-4562-b2e2-9772eefc7bbc.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa0ee7b5d-11bc-4368-93b9-9439a70d3c10.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4a1396ad-1292-4908-8420-b553ca005a22.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9cb4b7f6-1959-4a06-a276-e244280229f0.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf068d9bc-933e-4156-8a90-3a5083de8dd7.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse9a90284-df94-4148-82de-415d71d50d6f.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6d3272b0-4a07-4566-a0cf-13ed36188b4c.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs240081a5-d005-4682-8359-d9174f060cab.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb93270fa-0c5b-418f-b049-64c74d5dfbeb.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs07e673d1-152e-4565-a054-05adeefe3231.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf3ad9dbd-c187-407d-abed-7ca62fb8469a.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs853be2d4-5323-4c2b-b1c2-1af3d2a4e4bc.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs330903ec-aef1-4c3d-a2d0-4ccb7330695a.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3a67b268-aac1-4d61-bc7c-126ae9b36011.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2bff50c1-de85-4450-b96b-878d9887adc6.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3dc3129b-d57e-4b80-a20f-5d94d51d9eff.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6f6942c3-f5e2-41a7-8ec2-3c2ac22ab56a.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc8d1b1d8-1c8f-43aa-a309-46fa2dad501a.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc64581ca-a7cb-4ba8-a4eb-ae2507fafc10.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1f6fa946-1340-4a90-a985-453602322b7a.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9b96b50c-c2bb-4144-9f22-c3a188e4c1df.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0c72a805-a37b-46b9-9b7b-12cd08b9b022.tmp". The process cannot access the file because it is being used by another process
7:55 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf8b8712b-394e-4fa2-adf7-88538af88d8b.tmp". The process cannot access the file because it is being used by another process
7:56 PM: Found Adware: delfin
7:57 PM: c:\windows\all users\application data\pcsvc (1 subtraces) (ID = -2147481135)
7:57 PM: c:\windows\all users\application data\wsxs (1 subtraces) (ID = -2147481131)
7:57 PM: patchme.exe (ID = 57767)
8:07 PM: c:\program files\appliedsearch_autoinstall (3 subtraces) (ID = -2147474739)
8:07 PM: bar.dll (ID = 137713)
8:07 PM: File Sweep Complete, Elapsed Time: 00:16:35
8:07 PM: Full Sweep has completed. Elapsed time 00:19:57
8:07 PM: Traces Found: 53
********
7:18 PM: | Start of Session, Friday, January 20, 2006 |
7:18 PM: Spy Sweeper started
7:18 PM: Sweep initiated using definitions version 604
7:18 PM: Starting Memory Sweep
7:20 PM: Memory Sweep Complete, Elapsed Time: 00:01:07
7:20 PM: Starting Registry Sweep
7:21 PM: Found Adware: morpheus adware
7:21 PM: HKCR\windowsie\ (1 subtraces) (ID = 135220)
7:21 PM: HKLM\software\classes\windowsie\ (1 subtraces) (ID = 135221)
7:21 PM: Found Adware: appliedsearch
7:21 PM: HKCR\interface\{6600d22d-083f-11d6-99de-d172e92ebc2a}\ (8 subtraces) (ID = 661011)
7:21 PM: HKCR\interface\{6600d22e-083f-11d6-99de-d172e92ebc2a}\ (8 subtraces) (ID = 661020)
7:21 PM: HKLM\software\classes\interface\{6600d22d-083f-11d6-99de-d172e92ebc2a}\ (8 subtraces) (ID = 661094)
7:21 PM: HKLM\software\classes\interface\{6600d22e-083f-11d6-99de-d172e92ebc2a}\ (8 subtraces) (ID = 661103)
7:22 PM: Found Adware: redzip toolbar
7:22 PM: HKU\.DEFAULT\software\microsoft\windows\currentversion\explorer\ || insid (ID = 139328)
7:22 PM: Registry Sweep Complete, Elapsed Time:00:02:10
7:22 PM: Starting Cookie Sweep
7:22 PM: Found Spy Cookie: questionmarket cookie
7:22 PM: default@questionmarket[1].txt (ID = 3217)
7:22 PM: Found Spy Cookie: overture cookie
7:22 PM: default@overture[2].txt (ID = 3105)
7:22 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
7:22 PM: Starting File Sweep
7:22 PM: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs68439b0a-3e93-4d21-b10e-ab1ba1fc2e0c.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e25be28-3444-4d21-accf-2580d103f5a0.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9321ba80-8781-4720-a44c-e354453d7bc5.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6cd8a8a3-b9e2-4e62-ac2b-16c9c38b77b3.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse9ad4690-326e-4511-88da-9d8e534c5e6f.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs749ac7c7-9deb-4682-9a03-be89a4deb317.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc6560e2c-f27f-4a67-8c02-59be1b624d0f.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa0a4ef39-1fb6-4bf1-a911-5d7f937de04b.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs65cfbf2e-1407-4edf-bb08-7988530bdda4.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs34f80521-0696-4f7e-a395-61b578c97f9a.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4f8bca75-3ad6-4314-839d-575ce2b70a86.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdb7b96d4-4ec5-4af3-a5e2-2645ed747453.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3c9b4839-a2dd-4540-89a7-cc94efcb9bcb.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs573399d3-b6f0-49c0-b3d9-0c4edd65c2f6.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5bd665b7-3fb7-4277-87cc-04f4f994b070.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs00298164-c375-4b54-b214-cc2f86fb0ad9.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs63b7f8dd-2a6b-47c5-9b67-ab5e0e941484.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4581ab02-4331-4756-bb8d-bd963e11afde.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs312389aa-f73e-40e4-8920-d91661a1433f.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd50f34fb-fa03-4ea0-8d04-26aa067b62c5.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9c9ceae1-fc63-4112-b6a3-a89ca44898ac.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs134a104d-349a-4a6a-9fce-cc9ceaa2e076.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse65a26f7-3e81-415d-8da8-66a01780cfd3.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscd979fa7-7c0b-4768-a161-b1a5b01e23d4.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscdec2d13-b988-41fe-a18f-9812cca64c88.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf204040d-ea62-45bb-a3eb-99540997c590.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5673af19-0886-4913-bf2e-dd035b347798.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1a3b7190-0855-45db-9732-d4e740fcb2ba.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse3372239-f345-4940-9761-7e9814ea5ad5.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc0874faf-503c-405b-95cf-0fe0396bc89d.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsecfc909e-6840-473e-94ff-73fe2c4e72e2.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs543afe6d-d453-440a-93d2-dd8e2534a576.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6fdf91b0-0fef-4d85-90d8-e45877a6b424.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4bcced7a-c91f-492b-8297-a7193b274743.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscdf9787a-d63d-43d0-9636-0ae2f3197beb.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9a03cdca-e149-498e-85f7-12bb22790bfc.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6bfcf5f2-7e1f-436c-ad98-60ac16a337d6.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs877fb376-a30a-4ef7-a8cb-c1b11dacac34.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs11385761-96cf-49d8-8795-630049197b3b.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6f0c4440-184a-4728-bea5-be13b6b8aea4.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfc745aa1-b9aa-4ecb-9659-72382e450b59.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs34056d50-4b21-4cdb-a236-be69eef5e691.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa9b9d3d5-5160-45b8-8169-acf2fa349684.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6b0e40ae-033e-4177-be2a-9747b3beb986.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1de0db24-fa73-4732-af87-aac6f9dc19db.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfbcd48ea-7ea3-434b-b5d7-16fc281fadf6.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs48aab939-6cfe-4c49-938d-85a604e6b80e.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs204d04e4-403d-424d-9211-2693525ac200.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9afcadc3-e502-4d4a-8dae-32e3f21812e8.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5824a90b-b2d5-4b1b-b5e2-664993507f4d.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs77b921c5-71fb-40f6-a28e-b6d1f7f994f3.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa43b2ad7-a42b-40e9-8574-213835294d43.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs52389a79-5586-47d3-96aa-db517a40db51.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs783605b2-d9b6-417f-a2b8-49354d41d87d.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs81fb387f-986a-4f07-81b9-4adde492833e.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs206cd93c-0a24-4822-863c-4078a4c7a945.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf1ea8b82-64dd-41af-bf53-8faa27bb3278.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs785e4347-df8e-404e-a2ee-faf79f91cf78.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs24d3482b-d199-47be-a17b-2cb3b0110f79.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbf3b8e1e-c395-4a37-8111-7f08e9447ffc.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs81ac0f00-44fe-4adc-863a-a629133066ec.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs77375907-b974-4d96-b383-cf716d5ddc8e.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb7cb9fc7-5984-4c0f-80e3-f7c342027205.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs97116cb7-1ce9-4fb8-ada8-f11c6a0c0aa8.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7f771885-f848-4e6f-9d2f-eb1d82f303c5.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7958fceb-eec4-44a1-8d24-21634aaad18a.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd3e9b524-4654-47b4-9aea-ae4a3efa944e.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs773767ce-68d0-4ec4-ac15-86f079923a45.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs947ece35-5b7b-454d-a3f0-e7b1bef30491.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs86585a77-9214-4155-babb-9cbdb2437866.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4fee3b16-6378-4b9e-ba6f-74570d5abc1c.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4cdbf7bb-1c08-499f-ac68-233286a11b7b.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1ec5a7f9-2a86-456c-8b83-2bd3a6178414.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa00f78a8-e7bd-4d9a-b541-513ce84c629d.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd90cf948-86a7-41c1-aec5-e5af327cd495.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs84b8c59a-fb29-440b-9869-fae882d9376b.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0d4d3f0f-2f44-4a14-8bb6-750bb9bffb5a.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs209ff4ce-f1fc-4282-8580-b52e5a30f1a8.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse40b779e-fc88-4cd7-9a09-f89fef623b5d.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc169c764-977a-44c2-8260-bcdfdb808d81.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsaa87f3da-f86a-4e37-8d6b-68812ed0f877.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6339362a-82f4-4562-b2e2-9772eefc7bbc.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa0ee7b5d-11bc-4368-93b9-9439a70d3c10.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4a1396ad-1292-4908-8420-b553ca005a22.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9cb4b7f6-1959-4a06-a276-e244280229f0.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf068d9bc-933e-4156-8a90-3a5083de8dd7.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse9a90284-df94-4148-82de-415d71d50d6f.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6d3272b0-4a07-4566-a0cf-13ed36188b4c.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs240081a5-d005-4682-8359-d9174f060cab.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb93270fa-0c5b-418f-b049-64c74d5dfbeb.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs07e673d1-152e-4565-a054-05adeefe3231.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf3ad9dbd-c187-407d-abed-7ca62fb8469a.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs853be2d4-5323-4c2b-b1c2-1af3d2a4e4bc.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs330903ec-aef1-4c3d-a2d0-4ccb7330695a.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3a67b268-aac1-4d61-bc7c-126ae9b36011.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2bff50c1-de85-4450-b96b-878d9887adc6.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3dc3129b-d57e-4b80-a20f-5d94d51d9eff.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6f6942c3-f5e2-41a7-8ec2-3c2ac22ab56a.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc8d1b1d8-1c8f-43aa-a309-46fa2dad501a.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc64581ca-a7cb-4ba8-a4eb-ae2507fafc10.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1f6fa946-1340-4a90-a985-453602322b7a.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9b96b50c-c2bb-4144-9f22-c3a188e4c1df.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0c72a805-a37b-46b9-9b7b-12cd08b9b022.tmp". The process cannot access the file because it is being used by another process
7:28 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf8b8712b-394e-4fa2-adf7-88538af88d8b.tmp". The process cannot access the file because it is being used by another process
7:30 PM: Found Adware: delfin
7:30 PM: c:\windows\all users\application data\pcsvc (1 subtraces) (ID = -2147481135)
7:30 PM: c:\windows\all users\application data\wsxs (1 subtraces) (ID = -2147481131)
7:30 PM: patchme.exe (ID = 57767)
7:43 PM: c:\program files\appliedsearch_autoinstall (3 subtraces) (ID = -2147474739)
7:43 PM: bar.dll (ID = 137713)
7:44 PM: File Sweep Complete, Elapsed Time: 00:21:53
7:44 PM: Full Sweep has completed. Elapsed time 00:25:19
7:44 PM: Traces Found: 53
********
6:47 PM: | Start of Session, Thursday, January 19, 2006 |
6:47 PM: Spy Sweeper started
7:14 PM: Your spyware definitions have been updated.
7:17 PM: Program Version 4.5.7 (Build 642) Using Spyware Definitions 604
7:18 PM: | End of Session, Friday, January 20, 2006 |


thanks
lecia1
Regular Member
 
Posts: 18
Joined: January 2nd, 2006, 10:26 pm

Unread postby AndyAtHull » January 21st, 2006, 7:56 am

Hi Lecia1,

Yeah it seems Webroot have pulled the plug on that link I gave you. It worked for me on the same day I posted to you. I have the trial installed.

I am just consulting with the teacher that is helping me. And I will get back to you as soon as possible on what to do next. Do not pay for SpySweeper.

Andy :)
User avatar
AndyAtHull
Visiting Staff
 
Posts: 1636
Joined: October 6th, 2005, 2:03 pm
Location: UK

Unread postby lecia1 » January 21st, 2006, 10:35 am

thank you - I will await your reply
lecia1
Regular Member
 
Posts: 18
Joined: January 2nd, 2006, 10:26 pm

Unread postby AndyAtHull » January 21st, 2006, 10:26 pm

Hi lecia1,

Can you re-run Ad-Aware for me. Update it on the globe first and run it as you did before. Just this time when it has finished scanning we need the log from it. To do so click on Show Logfile. Then right click on the log and press on Select All. Then right click again and click on Save. Save it to the desktop and post that to me.

Andy :)
User avatar
AndyAtHull
Visiting Staff
 
Posts: 1636
Joined: October 6th, 2005, 2:03 pm
Location: UK

Unread postby Elrond » January 21st, 2006, 10:40 pm

If need be post it in more than one post. It can be huge.
Just a warning. Sorry to but in.
E :)
User avatar
Elrond
Admin/Teacher Emeritus
 
Posts: 8818
Joined: February 17th, 2005, 9:14 pm
Location: Jerusalem

Unread postby lecia1 » January 22nd, 2006, 4:50 pm

her is the adware log

Ad-Aware SE Build 1.06r1
Logfile Created on:Sunday, January 22, 2006 3:33:20 PM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R88 20.01.2006
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
AdBlaster(TAC index:7):2 total references
BrilliantDigital(TAC index:6):4 total references
Cydoor(TAC index:7):2 total references
DownloadWare(TAC index:8):1 total references
eUniverse(TAC index:10):3 total references
TopSearch(TAC index:5):1 total references
Tracking Cookie(TAC index:3):4 total references
WhenU(TAC index:3):1 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for low-risk threats
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


1-22-2006 3:33:20 PM - Scan started. (Full System Scan)

Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [KERNEL32.DLL]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4291779715
Threads : 6
Priority : High
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : Win32 Kernel core component
InternalName : KERNEL32
LegalCopyright : Copyright (C) Microsoft Corp. 1991-2000
OriginalFilename : KERNEL32.DLL

#:2 [MSGSRV32.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294940479
Threads : 1
Priority : Normal
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows 32-bit VxD Message Server
InternalName : MSGSRV32
LegalCopyright : Copyright (C) Microsoft Corp. 1992-1998
OriginalFilename : MSGSRV32.EXE

#:3 [mmtask.tsk]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294850347
Threads : 1
Priority : Normal
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
ProductName : Microsoft Windows
CompanyName : Microsoft Corporation
FileDescription : Multimedia background task support module
InternalName : mmtask.tsk
LegalCopyright : Copyright © Microsoft Corp. 1991-2000
OriginalFilename : mmtask.tsk

#:4 [MPREXE.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294847855
Threads : 1
Priority : Normal
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : WIN32 Network Interface Service Process
InternalName : MPREXE
LegalCopyright : Copyright (C) Microsoft Corp. 1993-2000
OriginalFilename : MPREXE.EXE

#:5 [MSTASK.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294838523
Threads : 2
Priority : Normal
FileVersion : 4.71.2721.1
ProductVersion : 4.71.2721.1
ProductName : Microsoft® Windows® Task Scheduler
CompanyName : Microsoft Corporation
FileDescription : Task Scheduler Engine
InternalName : TaskScheduler
LegalCopyright : Copyright (C) Microsoft Corp. 2000
OriginalFilename : mstask.exe

#:6 [ASHSERV.EXE]
FilePath : C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\
ProcessID : 4294838667
Threads : 28
Priority : Normal
FileVersion : 4, 6, 739, 0
ProductVersion : 4, 6, 0, 0
ProductName : avast! Antivirus
FileDescription : avast! antivirus service
InternalName : aswServ
LegalCopyright : Copyright (c) 2005 ALWIL Software
OriginalFilename : aswServ.exe

#:7 [DEVLDR16.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294893987
Threads : 3
Priority : Normal
FileVersion : 1, 0, 0, 15
ProductVersion : 1, 0, 0, 15
ProductName : Creative Ring3 NT Inteface
CompanyName : Creative Technology Ltd.
FileDescription : DevLdr16
InternalName : DevLdr
LegalCopyright : Copyright © 1998 - 2000 Creative Technology Ltd.
OriginalFilename : DevLdr16.exe

#:8 [EXPLORER.EXE]
FilePath : C:\WINDOWS\
ProcessID : 4294897355
Threads : 15
Priority : Normal
FileVersion : 5.50.4134.100
ProductVersion : 5.50.4134.100
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : Copyright (C) Microsoft Corp. 1981-2000
OriginalFilename : EXPLORER.EXE

#:9 [RPCSS.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294787571
Threads : 6
Priority : Normal
FileVersion : 4.71.3328
ProductVersion : 4.71.3328
ProductName : Microsoft(R) Windows NT(TM) Operating System
CompanyName : Microsoft Corporation
FileDescription : Distributed COM Services
InternalName : rpcss.exe
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1998
OriginalFilename : rpcss.exe

#:10 [SYSTRAY.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294644863
Threads : 2
Priority : Normal
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : System Tray Applet
InternalName : SYSTRAY
LegalCopyright : Copyright (C) Microsoft Corp. 1993-2000
OriginalFilename : SYSTRAY.EXE

#:11 [ONETOUCHMON.EXE]
FilePath : C:\PROGRAM FILES\VISIONEER ONETOUCH\
ProcessID : 4294659271
Threads : 1
Priority : Normal
FileVersion : 3, 1, 2, 20
ProductVersion : 3, 1, 2, 20
ProductName : OneTouch Module
CompanyName : Visioneer Inc
FileDescription : OneTouch Module
InternalName : OneTouch Module
LegalCopyright : Copyright 1997 - 2001
LegalTrademarks : Visioneer owns all rights to this Module
OriginalFilename : OneTouch Module
Comments : Part of the OneTouch package

#:12 [ASHWEBSV.EXE]
FilePath : C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\
ProcessID : 4294684967
Threads : 17
Priority : Normal


#:13 [ASHMAISV.EXE]
FilePath : C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\
ProcessID : 4294686431
Threads : 8
Priority : Normal


#:14 [SPYSWEEPER.EXE]
FilePath : C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\
ProcessID : 4294702155
Threads : 3
Priority : Normal
FileVersion : 4,5,7,642
ProductVersion : 4, 5
ProductName : Spy Sweeper
CompanyName : Webroot Software, Inc.
FileDescription : Spy Sweeper Client Executable
LegalCopyright : Copyright (C) 2002 - 2005, All Rights Reserved.
OriginalFilename : SpySweeper.exe

#:15 [WMIEXE.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294607723
Threads : 3
Priority : Normal
FileVersion : 4.90.2452.1
ProductVersion : 4.90.2452.1
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : WMI service exe housing
InternalName : wmiexe
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : wmiexe.exe

#:16 [SPOOL32.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294525163
Threads : 4
Priority : Normal
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler Sub System Process
InternalName : spool32
LegalCopyright : Copyright (C) Microsoft Corp. 1994 - 1998
OriginalFilename : spool32.exe

#:17 [WRSSSDK.EXE]
FilePath : C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\
ProcessID : 4294469035
Threads : 13
Priority : Normal
FileVersion : 2,0,7,442
ProductVersion : 2, 0
ProductName : Spy Sweeper SDK
CompanyName : Webroot Software, Inc.
FileDescription : Spy Sweeper SDK
LegalCopyright : Copyright (C) 2002 - 2005, All Rights Reserved.
LegalTrademarks : Spy Sweeper is a trademark of Webroot Software, Inc.
OriginalFilename : SpySweeper.exe

#:18 [RNAAPP.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294322471
Threads : 3
Priority : Normal
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : Dial-Up Networking Application
InternalName : RNAAPP
LegalCopyright : Copyright (C) Microsoft Corp. 1992-1996
OriginalFilename : RNAAPP.EXE

#:19 [TAPISRV.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294313391
Threads : 5
Priority : Normal
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : Microsoft® Windows(TM) Telephony Server
InternalName : Telephony Service
LegalCopyright : Copyright (C) Microsoft Corp. 1994-1998
OriginalFilename : TAPISRV.EXE

#:20 [DDHELP.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294291811
Threads : 2
Priority : Realtime
FileVersion : 4.08.01.0881
ProductVersion : 4.08.01.0881
ProductName : Microsoft® DirectX for Windows® 95 and 98
CompanyName : Microsoft Corporation
FileDescription : Microsoft DirectX Helper
InternalName : DDHelp.exe
LegalCopyright : Copyright © Microsoft Corp. 1994-2001
OriginalFilename : DDHelp.exe

#:21 [STIMON.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294297155
Threads : 5
Priority : Normal
FileVersion : 4.90.3000.1
ProductVersion : 4.90.3000.1
ProductName : Microsoft(R) Windows(R) Millennium Operating System
CompanyName : Microsoft Corporation
FileDescription : Still Image Devices Monitor
InternalName : STIMON
LegalCopyright : Copyright (C) Microsoft Corp. 1981-2000
OriginalFilename : STIMON.EXE

#:22 [HPZSTC11.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294259179
Threads : 4
Priority : Normal
FileVersion : 2.327.1.0
ProductVersion : 2.327.1.0
ProductName : HP DeskJet
CompanyName : HP
LegalCopyright : Copyright (c) Hewlett-Packard Company 1999-2004

#:23 [HPZENG11.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294130311
Threads : 4
Priority : Normal
FileVersion : 2.327.1.0
ProductVersion : 2.327.1.0
ProductName : HP DeskJet
CompanyName : HP
FileDescription : HPDJ Print Engine
InternalName : HPDJ
LegalCopyright : Copyright (c) Hewlett-Packard Company 1999-2004

#:24 [HPZIPM12.EXE]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294118419
Threads : 1
Priority : Normal
FileVersion : 8, 0, 0, 0
ProductVersion : 8, 0, 0, 0
ProductName : HP PML
CompanyName : HP
FileDescription : PML Driver
InternalName : PmlDrv
LegalCopyright : Copyright © 1998, 1999 Hewlett-Packard Company
OriginalFilename : PmlDrv.exe

#:25 [AD-AWARE.EXE]
FilePath : C:\PROGRAM FILES\LAVASOFT\AD-AWARE SE PERSONAL\
ProcessID : 4294261095
Threads : 3
Priority : Normal
FileVersion : 6.2.0.236
ProductVersion : SE 106
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft AB Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


Tracking Cookie Object Recognized!
Type : IECache Entry
Data : default@overture[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:10
Value : Cookie:default@overture.com/
Expires : 1-19-2016 9:35:44 AM
LastSync : Hits:10
UseCount : 0
Hits : 10

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : default@questionmarket[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:1
Value : Cookie:default@questionmarket.com/
Expires : 3-10-2007 9:41:52 AM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 2
Objects found so far: 2



Deep scanning and examining files (c:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : default@questionmarket[1].txt
TAC Rating : 3
Category : Data Miner
Comment :
Value : c:\WINDOWS\Cookies\default@questionmarket[1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : default@overture[1].txt
TAC Rating : 3
Category : Data Miner
Comment :
Value : c:\WINDOWS\Cookies\default@overture[1].txt

DownloadWare Object Recognized!
Type : File
Data : A0166688.1
TAC Rating : 8
Category : Malware
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1.0.0.116
ProductVersion : 1.0.0.116
ProductName : DownloadWare
FileDescription : DownloadWare
LegalCopyright : DownloadWare © 2001


eUniverse Object Recognized!
Type : File
Data : A0166915.0
TAC Rating : 10
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : BHO Module
FileDescription : BHO Module
InternalName : BHO
LegalCopyright : Copyright 2003
OriginalFilename : BHO.DLL


WhenU Object Recognized!
Type : File
Data : A0166917.1
TAC Rating : 3
Category : Misc
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 2, 1, 1, 1
ProductVersion : 2, 1, 1, 1
ProductName : Save! Uninstall
CompanyName : WhenU.com, Inc.
FileDescription : Save! Uninstall
InternalName : SaveUninst
LegalCopyright : Copyright 2001
OriginalFilename : SaveUninst.exe


Cydoor Object Recognized!
Type : File
Data : A0166918.0
TAC Rating : 7
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 3, 2, 1, 0
ProductVersion : 3, 2, 1, 0
ProductName : Cydoor Technologies ad-system
CompanyName : Cydoor Technologies, Inc.
FileDescription : Cydoor Technologies ad-system
InternalName : CD_Clint.dll
LegalCopyright : Copyright (C) Cydoor Technologies, Inc. 1999-2001
LegalTrademarks : Cydoor Technologies(tm)
OriginalFilename : CD_Clint.dll
Comments : This is a module of Cydoor's ad system. Additional information is available
at http://www.cydoor.com


Cydoor Object Recognized!
Type : File
Data : A0166919.0
TAC Rating : 7
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : cd_htm module
CompanyName : Cydoor Technologies, Inc.
FileDescription : cd_htm module
InternalName : cd_htm.dll
LegalCopyright : Copyright (C) Cydoor Technologies, Inc. 1999-2001
LegalTrademarks : Cydoor Technologies(tm)
OriginalFilename : cd_htm.DLL
Comments : This is a module of Cydoor's ad system. Additional information is available
at http://www.cydoor.com


BrilliantDigital Object Recognized!
Type : File
Data : A0166920.0
TAC Rating : 6
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1, 0, 1, 9
ProductVersion : 1, 0, 0, 0
ProductName : BDEData Module
CompanyName : Brilliant Digital Entertainment
FileDescription : BDEData (Release)
InternalName : BDEDATA
LegalCopyright : Copyright 1999
OriginalFilename : BDEDATA2.DLL


BrilliantDigital Object Recognized!
Type : File
Data : A0166921.0
TAC Rating : 6
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 3, 0, 39, 0
ProductVersion : 3, 0, 39, 0
ProductName : Brilliant Digital Entertainment Inc. BDEDownloader
CompanyName : Brilliant Digital Entertainment Inc.
FileDescription : BDEDownloader
InternalName : BDEDownloader
LegalCopyright : Copyright © 2001 Brilliant Digital Entertainment Inc.
OriginalFilename : BDEDownloader.dll


BrilliantDigital Object Recognized!
Type : File
Data : A0166922.0
TAC Rating : 6
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1, 0, 0, 7
ProductVersion : 1, 0, 0, 1
ProductName : Brilliant Digital Entertainment Inc. BDEFdiTest
CompanyName : Brilliant Digital Entertainment Inc.
FileDescription : BDEFdiTest
InternalName : BDEFdiTest
LegalCopyright : Copyright © 2000
OriginalFilename : BDEFdiTest.exe


BrilliantDigital Object Recognized!
Type : File
Data : A0166923.0
TAC Rating : 6
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1, 2, 4, 1
ProductVersion : 1, 0, 0, 0
ProductName : BDEInstallerComponent Module
CompanyName : Brilliant Digital Entertainment
FileDescription : BDESmartInstaller (Release)
InternalName : BDEINSTALLERCOMPONENT
LegalCopyright : Copyright 2002
OriginalFilename : BDEINSTALLERCOMPONENT.DLL


AdBlaster Object Recognized!
Type : File
Data : A0166924.0
TAC Rating : 7
Category : Malware
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 3.00
ProductVersion : 3.00
ProductName : ESDADS1
CompanyName : ESD Technologies, Inc.
InternalName : iexplorr11
LegalCopyright : Copyright 2002 ESD Technologies, Inc.
OriginalFilename : iexplorr11.dll


eUniverse Object Recognized!
Type : File
Data : A0166925.0
TAC Rating : 10
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : kkv Application
FileDescription : kkv MFC Application
InternalName : kkv
LegalCopyright : Copyright (C) 2003
OriginalFilename : kkv.EXE


eUniverse Object Recognized!
Type : File
Data : A0166926.0
TAC Rating : 10
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1, 2, 0, 0
ProductVersion : 1, 2, 0, 0
ProductName : sui Application
FileDescription : sui MFC Application
InternalName : sui
LegalCopyright : Copyright (C) 2003
OriginalFilename : sui.EXE


TopSearch Object Recognized!
Type : File
Data : A0166927.0
TAC Rating : 5
Category : Data Miner
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1, 0, 0, 9
ProductVersion : 1, 0, 0, 0
ProductName : Altnet Inc. TopSearch
CompanyName : Altnet Inc.
FileDescription : TopSearch
InternalName : TopSearch
LegalCopyright : Copyright Altnet Inc. © 2002
OriginalFilename : TopSearch.dll


AdBlaster Object Recognized!
Type : File
Data : A0168079.CPY
TAC Rating : 7
Category : Malware
Comment :
Object : c:\_RESTORE\TEMP\
FileVersion : 1.00
ProductVersion : 1.00
ProductName : Project1
InternalName : RegisterKazaaUpgradeSuite3
OriginalFilename : RegisterKazaaUpgradeSuite3.exe


Disk Scan Result for c:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 18

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
0 entries scanned.
New critical objects:0
Objects found so far: 18




Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 18

3:42:01 PM Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:08:41.570
Objects scanned:100122
Objects identified:18
Objects ignored:0
New critical objects:18
lecia1
Regular Member
 
Posts: 18
Joined: January 2nd, 2006, 10:26 pm

Unread postby AndyAtHull » January 22nd, 2006, 7:47 pm

Hi lucia1,

The objects that Ad-Aware finds are in the system restore folder. When we flush your system restore they will be deleted. But first follow this instruction. Kazza is still there somewhere. So to get rid of this go to this site, look for kazzabegone; scroll to the bottom. Also download LSPfix:

http://www.spywareinfo.com/~merijn/downloads.html <<Kazzabegone

http://www.downloads.subratam.org/lspfix.zip <<LSPfix

----------
You may want to print this out.
----------

Please use kazaabegone first. Open it and check Search & Detroy all installed objects> Then click on Go. It may require a restart.

And if your internect connections goes. Use LSPfix like this:

Please run the LSP-Fix program, and click on the finish button. Reboot and you should be able to get back on.

----------

Please uninstall SpySweeper, unless you want to pay for this tool. Delete Kazzabegone and LSPfix.

----------

This is my post for when you are all clean - which you seem to be. Please adivise on any problems you may still have.:-

Hide System Files
* Click Start, Programs and Accessories and open Windows Explorer.
* Select a hard drive from the left hand side of the Windows Explorer window.
* Select Hide the Entire contents of this drive
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading de-select Show hidden files and folders.
* Check the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure. And also to flush any files like the Ad-Aware objects:
  1. Turn off System Restore.
    1. Click Start, Settings, and then click Control Panel.
    2. Double-click the System icon. The System Properties dialog box appears.

    NOTE: If the System icon is not visible, click "View all Control Panel options" to display it.

    3. Click the Performance tab, and then click File System.
    4. Click the Troubleshooting tab, and then check Disable System Restore.
    5. Click OK. Click Yes, when you are prompted to restart Windows.

    Turn ON System Restore.
    1. Click Start, point to Settings, and then click Control Panel.
    2. Double-click System, and then click the Performance tab.
    3. Click File System, and then click the Troubleshooting tab.
    4. Uncheck Disable System Restore.
    5. Click OK. Click Yes, when you are prompted to restart Windows.
  2. Make your Internet Explorer more secure - This can be done by following these simple instructions:
    1. From within Internet Explorer click on the Tools menu and then click on Options.
    2. Click once on the Security tab
    3. Click once on the Internet icon so it becomes highlighted.
    4. Click once on the Custom Level button.
      1. Change the Download signed ActiveX controls to Prompt
      2. Change the Download unsigned ActiveX controls to Disable
      3. Change the Initialise and script ActiveX controls not marked as safe to Disable
      4. Change the Installation of desktop items to Prompt
      5. Change the Launching programs and files in an IFRAME to Prompt
      6. Change the Navigate sub-frames across different domains to Prompt
      7. When all these settings have been made, click on the OK button.
      8. If it prompts you as to whether or not you want to save the settings, press the Yes button.
    5. Next press the Apply button and then the OK to exit the Internet Properties page.
  3. Use an Anti Virus Software - It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See this link for a listing of some on line & their stand-alone anti virus programs:
    Click here for more information on -> Computer Safety On line - Anti-Virus

    I would recommend Grisofts© AVG or AVAST©. As these are the more secure and better ones.
  4. Update your Anti Virus Software - It is imperitive that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.
  5. Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. For an article on Firewalls and a listing of some available ones see the link below:
    Click here for more information on -> Computer Safety On line - Software Firewalls

    I would recommend ZoneAlarm© as a firewall as it's easy to use. But for a more secure firewall, Sunbelts Kerio© is the one.
  6. Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

    Set up system to ensure a regular update of the Operating System.

    Automatically:
    1. On the Desktop, right-click My Computer.
    2. Click Properties.
    3. Click on Automatic Updates
    4. Check the option of choice (I use Automatic (Recommended)). If you use dial-up I would recommend using the
      Notify Me option so that you can download when you can afford the time and bandwidth overheads.
    5. Select the Day/Time of choice
    6. Click Apply
    7. Click OK


    Next, if they're not already present, I would recommend the download and installation of some or all of the following programs (all free), and the updating of them regularly
  7. Install Spybot© - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option.
    This will provide real-time spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an anti virus software. A tutorial on installing & using this product can be found here: Click here for more info -->Instructions for - Spybot S & D and Ad-aware
  8. Install Lavasofts© Ad-Aware - Install and download Ad-Aware. You should also scan your computer with the program on a regular basis just as you would an anti virus software in conjunction with Spybot. A tutorial on installing & using this product can be found here: Click here for more info -->Instructions for - Spybot S & D and Ad-aware
  9. Install Javacools© SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer and Firefox settings and that will protect you from running and downloading known malicious programs. A article on anti-malware products with links for this program and others can be found here: Click here for more info -->Computer Safety on line - Anti-Malware
  10. Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.
Follow this list and your potential for being infected again will reduce dramatically. Remember, A clean computer is a happy Computer :D
User avatar
AndyAtHull
Visiting Staff
 
Posts: 1636
Joined: October 6th, 2005, 2:03 pm
Location: UK

Unread postby Elrond » January 27th, 2006, 12:28 pm

Glad we could be of assistance.

This topic is now closed. If you wish it
reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.


You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
Elrond
Admin/Teacher Emeritus
 
Posts: 8818
Joined: February 17th, 2005, 9:14 pm
Location: Jerusalem
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 47 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware